PapaTramp
fcf3da223c
test/docs: RDP agent.lifecycle ingest and 422 notes
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-28 10:34:23 +10:00
PapaTramp
f322a46f98
docs: RDP SAC 409 spool loop fix 1.2.10-SAC
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-28 10:27:25 +10:00
PapaTramp
a218ff2581
docs: RDP SAC spool 422 and 1.2.9-SAC notes
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-28 10:20:31 +10:00
PapaTramp
98055dfdf8
docs: RDP SAC UTF-8 fix note for report.daily.rdp mojibake
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-28 10:05:49 +10:00
PapaTramp
c8f357007f
feat: dashboard top hosts/types, problems 24h, drill-down (d2-2)
...
- Extend /dashboards/summary; Events filters from query (hostname, severity)
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-28 10:01:07 +10:00
PapaTramp
249894d8e1
feat: UI Problems list filters, detail card and event timeline (d2-1)
...
- Filters status/severity/hostname; /problems/:id with Ack/Resolve and timeline
- Dashboard drill-down to open problems
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-28 09:55:28 +10:00
PapaTramp
64b5ef297a
feat: problem rules v1 brute-force, privilege spike, host silence (d1-3)
...
- Threshold rules on ingest; heartbeat auto-resolves host silence
- Config thresholds in sac-api.env; unit tests
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-28 09:51:05 +10:00
PapaTramp
83f48dce97
fix: alembic 003 avoid :r bind param in fingerprint backfill SQL
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-28 09:47:35 +10:00
PapaTramp
a4a224b284
feat: Problems correlation fingerprint, count, last_seen (d1-2)
...
- Migration 003; windowed host+type+rule correlation on ingest
- GET /problems filters; GET /problems/{id} with event timeline; ack/resolve 409 guard
- Tests and SAC_PROBLEM_CORRELATION_WINDOW_MINUTES config
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-28 09:46:12 +10:00
PapaTramp
8eb40cf75d
docs: agent version bumps and deploy triggers (1.4)
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-28 09:34:22 +10:00
PapaTramp
4d603637e5
fix(deploy): sync systemd unit, preflight DB check, health retry
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-28 09:28:01 +10:00
PapaTramp
e0b066f5e5
fix(deploy): recover from diverging git after force-push on kalinamall
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-28 09:26:06 +10:00
PapaTramp
25a485fabb
docs: git policy — kalinamall only, push after each feature
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-28 09:23:10 +10:00
PapaTramp
2b76ae8497
feat: ingest HTTP 201/409 for event_id idempotency
...
- Validate UUID format; log created/duplicate/rejected
- Tests for 201, 409, 422; update agent-integration and work-plan
- Docs: neutral IDE wording (no product-specific editor names)
2026-05-28 09:13:12 +10:00
PapaTramp
5cf76f492c
docs: add display_name tasks for RDP, ssh, and SAC hosts
...
Document ServerDisplayName parity with ssh SERVER_DISPLAY_NAME and
agent-display-* checklist items for SAC Hosts UI.
2026-05-27 17:02:23 +10:00
PapaTramp
d1b89c75dd
docs: add 2-day delivery and hourly checklist
...
Add execution checklist for next two development days and a follow-up week of testing in work-plan.md.
2026-05-27 16:12:56 +10:00
PapaTramp
721de21d5c
docs: update agent integration readiness checklist
...
Mark completed SAC config, check-sac, and spool items for ssh and RDP agents.
2026-05-27 15:33:42 +10:00
PapaTramp
8995a34037
fix: faster sac-api restart (TimeoutStopSec, SSE cancel on shutdown)
2026-05-27 14:53:54 +10:00
PapaTramp
61c9f9b673
feat: reports page with formatted daily report cards
2026-05-27 14:15:15 +10:00
PapaTramp
04301ab359
feat: host heartbeat status and dashboard metrics (2.2)
...
Track agent.heartbeat and report.daily.ssh per host; show online/stale
on Hosts UI; dashboard counters and SAC_HEARTBEAT_STALE_MINUTES config.
2026-05-27 13:36:17 +10:00
PapaTramp
9ba3c4b63b
docs: pilot 2.1 exclusive (Linux) runbook
2026-05-27 13:25:47 +10:00
PapaTramp
b404747f8d
test: version constants without DB import
2026-05-27 13:21:02 +10:00
PapaTramp
c657a65970
feat: v0.2.0 branding, healthz version, SSE dashboard live
...
Centralize APP_VERSION 0.2.0; /health and /healthz return version;
startup log line; UI title Security Alert Center v.0.2.0;
SSE /api/v1/stream/events for live dashboard counters.
2026-05-27 13:20:39 +10:00
PapaTramp
ea221db3c7
feat: Dashboard MVP with summary API and UI
...
Add GET /api/v1/dashboards/summary (24h events, open problems,
hosts, severity breakdown, recent events) and Vue /dashboard page.
2026-05-27 12:37:06 +10:00
PapaTramp
eeba3a704d
feat: Telegram notifications from SAC on ingest
...
Send Telegram alerts for high/critical events and new Problems.
Configurable via TELEGRAM_* env vars; ingest never fails on send errors.
2026-05-27 12:21:03 +10:00
PapaTramp
5fce00faae
feat: Problems API, ingest hook, and UI
2026-05-27 11:24:19 +10:00
PapaTramp
b19cdf2b47
fix: SPA fallback для /events при F5 (index.html)
2026-05-27 11:01:47 +10:00
PapaTramp
947fc4ab98
docs: тестовый агент ubabuba; gitignore deploy helpers
2026-05-27 10:47:54 +10:00
PapaTramp
4265d58c4b
chore: gitignore local SSH deploy helper scripts
2026-05-26 22:46:15 +10:00
PapaTramp
a4bbc14448
docs: prod status, sac-deploy.sh; update install and deployment guides
2026-05-26 22:03:10 +10:00
PapaTramp
bdfc7016e6
feat: phase 1C JWT UI, events/hosts API, Vue frontend
2026-05-26 21:46:34 +10:00
PapaTramp
d8a8329397
docs: права /etc/ssl/sac — root:ssl-cert, www-data в группе
2026-05-26 21:37:56 +10:00
PapaTramp
a9bea3d276
docs: PFX -legacy на Ubuntu 24.04, scp с другого Linux
2026-05-26 21:27:52 +10:00
PapaTramp
0c5d2537db
docs: подробное руководство по копированию wildcard TLS на сервер
2026-05-26 21:15:38 +10:00
PapaTramp
21578b27c9
docs: nginx TLS с корпоративным wildcard VeriSign
2026-05-26 21:14:22 +10:00
PapaTramp
2c12f161a1
fix(nginx): только HTTP до certbot, без ssl без сертификата
2026-05-26 21:12:48 +10:00
PapaTramp
934a5a0c9c
fix: загрузка sac-api.env через pydantic, не EnvironmentFile systemd
2026-05-26 21:07:51 +10:00
PapaTramp
539126b75e
fix(deploy): конфиг в /opt/security-alert-center/config (sac:sac)
...
Убирает ошибку Permission denied при каталоге /etc root:root.
2026-05-26 20:59:44 +10:00
PapaTramp
38c137cbd3
fix(docs): chmod 750 на каталог /etc/security-alert-center для группы sac
2026-05-26 20:56:38 +10:00
PapaTramp
6d33669ac2
fix(docs): sac-api.env chmod 640 root:sac для пользователя sac
2026-05-26 20:53:10 +10:00
PapaTramp
69547d83bc
docs: URL sac.kalinamall.ru во всех руководствах и примерах конфигов
2026-05-26 20:30:10 +10:00
PapaTramp
9203af90d5
docs: native Ubuntu install as primary; systemd and nginx
...
- install-ubuntu-24.04-native.md (production) and -docker.md (alternative)
- deploy/systemd/sac-api.service, nginx/sac.conf.example, env.native.example
- deployment, README, INDEX, work-plan, TZ updated
2026-05-26 20:28:05 +10:00
PapaTramp
69a232d08a
feat: backend ingest API, Docker Compose, Ubuntu install guide
...
- FastAPI: POST /api/v1/events, GET /health, JSON Schema validation
- PostgreSQL models, Alembic migration, bootstrap API key
- deploy/docker-compose.yml, .env.example
- docs/install-ubuntu-24.04.md, updated work-plan (agents first)
2026-05-26 20:21:31 +10:00
PapaTramp
bf1c1c9fe9
docs: обновить пример путей в workspace
2026-05-26 19:59:51 +10:00
PapaTramp
2f82c7c658
chore: пути репозиториев D:\Soft\Git
2026-05-26 19:58:59 +10:00
PapaTramp
4f3adc9429
docs: ТЗ v1.0, планы и схема SAC (фаза 0)
...
Security Alert Center — документация без кода приложения.
- TZ, архитектура, интеграция агентов (UseSAC)
- JSON Schema событий v1, deployment Ubuntu 24.04
- План работ, roadmap, multi-root workspace
2026-05-26 19:54:47 +10:00